Threats Tagged 'cve-2026-18938'

A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to a memory corruption issue, specifically a heap out-of-bounds write, which can crash the p11-kit RPC parsing process, resulting in a Denial of Service (DoS). This vulnerability is only exploitable on 32 bit systems.

CVE-2026-18938 is a heap-based buffer overflow vulnerability in the p11-kit component of Red Hat Enterprise Linux 10. It arises from an integer overflow that causes miscalculation of memory allocation for nested attributes, leading to heap out-of-bounds writes. This flaw can be exploited locally or by an attacker with access to a reachable RPC channel to crash the p11-kit RPC parsing process, resulting in a Denial of Service (DoS). The vulnerability is only exploitable on 32-bit systems. No official fix or mitigation currently meets Red Hat's criteria for deployment.